Subprocessors
Every third party that processes personal data on our instructions. This list is the commitment, not a summary of it.
Current list
5 processorsGeBeCert acts as a processor in respect of the verification events recorded against your products, and as a controller in respect of your own account data. These are the third parties that process personal data on our instructions in both roles.
We impose on every processor, by contract, data protection obligations no less protective than those we owe you, and we remain fully liable for the performance of a processor’s obligations where that processor fails to meet them. You never have to pursue a processor directly to enforce your rights.
Railway
Application runtime, database, and file storage. Hosts the production application, the primary datastore, and uploaded product media.
Personal data held: Account data (company name, contact email, hashed passwords); Product content (names, descriptions, media files, QR code payloads); Verification events (timestamp, product identifier, verification verdict); Session records and hashed access tokens.
Country of processing: United States. Transfer basis: Standard contractual clauses.
Resend
Delivery of verification, password reset, and security messages to account administrators and their team members.
Personal data held: Recipient email address; Message content (verification links, account notifications).
Country of processing: United States. Transfer basis: Standard contractual clauses.
ipwho.is
Resolves a scan event’s source IP address to an approximate country, city, and coordinate pair for the brand analytics map. Called over HTTPS with an uncompressed response request.
Personal data held: Source IP address of a scan event; Returned country, city, and approximate coordinates.
Country of processing: Global (anycast edge). Transfer basis: Provider published terms.
OpenStreetMap
Supplies the map tiles that render the brand analytics map. Tiles are requested by your browser directly, not by our servers.
Personal data held: Your browser’s IP address; Browser user agent and referrer.
Country of processing: Global (CDN). Transfer basis: Open Database License.
YouTube
Serves embedded product videos on verification pages. Media is requested by your browser directly, not by our servers.
Personal data held: Your browser’s IP address; Browser user agent and referrer.
Country of processing: Global (Google CDN). Transfer basis: Google privacy terms.
Changes to this list
We give at least 30 days’ written notice to account administrators before a new processor begins handling personal data, including the processing it will perform. Notice is given by email to the account administrator and by an update to this page.
If you object in writing within 15 business days of that notice, on reasonable data-protection grounds, we will either not appoint the new processor or, if that is not possible, you may terminate the affected service without penalty. We refund any prepaid, unused fees for the period you terminate.
The processor list in Section 04 of our Privacy Policy is the same list. It is rendered from a single source, so the two cannot disagree.
Providers your browser contacts directly
Not subprocessorsMap tiles and embedded video are loaded by your browser, not by our servers. That means your IP address is visible to those providers under their own privacy policies, and we do not receive it in connection with those requests.
They are listed here for completeness and transparency rather than because we instruct them to process your personal data. If you would prefer to suppress third-party requests entirely, a content blocker or strict tracking protection in your browser will prevent the tiles and the video from loading.
Contact
Questions about our subprocessor list, or a request for a copy of the contractual terms we have in place with a processor: [email protected].
General enquiries: the contact page.